SQL stored queries or procedures installed during Tanium installation must be removed from the Tanium Server.

Overview

Finding ID	Version	Rule ID	IA Controls	Severity
V-67033	TANS-DB-000006	SV-81523r1_rule		Medium

Description
Failure to protect organizational information from data mining may result in a compromise of information. Data storage objects include, for example, databases, database records, and database fields. Data mining prevention and detection techniques include, for example: limiting the types of responses provided to database queries; limiting the number/frequency of database queries to increase the work factor needed to determine the contents of such databases; and notifying organizational personnel when atypical database queries or accesses occur.

Description

Failure to protect organizational information from data mining may result in a compromise of information. Data storage objects include, for example, databases, database records, and database fields. Data mining prevention and detection techniques include, for example: limiting the types of responses provided to database queries; limiting the number/frequency of database queries to increase the work factor needed to determine the contents of such databases; and notifying organizational personnel when atypical database queries or accesses occur.

STIG	Date
Tanium 6.5 Security Technical Implementation Guide	2016-09-29

Details

Check Text ( C-67669r1_chk )
Access the Tanium Server interactively. Log on with an account with administrative privileges to the server. Review the folder to which the Tanium installation package was downloaded and, if different, the folder from which the Tanium installation was run. If any SQL stored queries or procedures are found in the folder to which the Tanium installation package was downloaded and, if different, the folder from which the Tanium installation was run, this is a finding.

Check Text ( C-67669r1_chk )

Access the Tanium Server interactively.

Log on with an account with administrative privileges to the server.

Review the folder to which the Tanium installation package was downloaded and, if different, the folder from which the Tanium installation was run.

If any SQL stored queries or procedures are found in the folder to which the Tanium installation package was downloaded and, if different, the folder from which the Tanium installation was run, this is a finding.

Fix Text (F-73133r1_fix)
Access the Tanium Server interactively. Log on with an account with administrative privileges to the server. Locate and remove the SQL queries or procedures from the folder to which the Tanium installation package was downloaded and, if different, the folder from which the Tanium installation was run.